What problem does it solve? Claude Code sessions accumulate manual "press 1 to approve" prompts for Bash commands not covered by the allow-list, interrupting flow and hiding which permissions should be added. This Skill audits session transcripts to surface exactly which commands triggered approvals and classifies them by risk. ## Core Features & Use Cases - Permission Auditing: Scans session JSONL files across all project directories under ~/.claude/projects/ to find Bash commands not covered by the settings.json allow-list. - Risk Classification: Labels each command HIGH (destructive), MEDIUM (external side effects), or LOW (read-only/local) and suggests allow rules sorted by risk. - Incremental State Tracking: Default runs audit only since the last run via ~/.claude/state/press1-check.json, with an optional Stop-hook mode featuring a 6-hour cooldown. - Use Case: After a week of sessions with frequent approval prompts, run the audit to get a color-coded list of suggested allow-list additions, then safely add the LOW-risk read-only commands to ~/.claude/settings.json. ## Quick Start Ask the assistant to run a permission audit with /press1-check to list which Bash commands required approval since the last run and suggest safe allow-list additions.